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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions and listings of claims in the 
application: 
Listing of Claims: 

1-9. (Canceled) 

10. (Currently Amended) A method comprising: 

receiving data from a network protocoi layer of a receiving client, the data 
comprising a portion of an event being received at the receiving client: 

determining if the data is eligible for a security operation, wherein eligibility is 
determined by selector data contained in the data; 

creating a selector based on the selector data and using said selector to search 
a receiving client database of security associations for at least one selector/security 
association pair identifying a security association corresponding to the selector, said 
receiving client database storing a plurality of selector/security association pairs 
received from a key server corresponding to different timewise inten/als of said event: 

applying the security operation to the data if the data is eligible wherein applying 
the security operation comprises using the security association on the at least a portion 
of the data: and 

sending the data to which the security operation has been applied to a network 
application program interface (API) of the receiving client: 

wherein, for any particular one of said timewise intervals of said event having a 
corresponding selector/security association pair, the receiving client receives said 
corresponding selector/security association pair from said key server and stores said 
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corresponding selector/security association pair in said receiving ciient database prior to 
receiving said particular one of said timewise intervals of said event, and 

Th e m e thod of c l a i m 6 wherein determining if the data is eligible for the security 
operation comprises determining that the data is not eligible for the security operation if 
the selector cannot be created based on the selector data, and wherein said data is 
sent to the network API of the receiving client without an applied security operation if it 
is so determined that the data is not eligible. 

11-22. (Canceled) 

23. (Currently Amended) A machine readable storage medium having stored 
thereon machine executable instructions, execution of said machine executable 
instructions being operable to implement a method comprising: 

receiving data from a network protocol layer of a receiving client, the data 
comprising a portion of an event being received at the receiving client: 

determining if the data is eligible for a security operation, wherein eligibility is 
determined by selector data contained in the data; 

creating a selector based on the selector data and using said selector to search 
a local receiving client database of security associations for at least one 
selector/security association pair identifying a security association corresponding to the 
selector, said receiving client database storing a plurality of selector/security association 
pairs received from a key sen/er corresponding to a succession of timewise intervals of 
said event; 

applying the security operation to the data if the data is eligible, wherein 
applying the security operation comprises using a security association on the at least a 
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portion of the data; and 

sending the data to which the security operation has been applied to a network 
application program interface (API) of the receiving client; 

wherein, for any particular one of said timewise intervals of said event having a 
corresponding selector/security association pair, the receiving client receives said 
corresponding selector/security association pair from said key server and stores said 
corresponding selector/security association pair in said receiving client database prior to 
receiving said particular one of said timewise intervals of said event, and 

Tho machine roadab l o storage med i um of c l aim 19 wherein determining if the 
data is eligible for the security operation comprises determining that the data is not 
eligible for the security operation if a selector cannot be created based on the data, and 
wherein said data is sent to the network API of the receiving client without an applied 
security operation if it is so determined that the data is not eligible. 



24-28. (Canceled) 



